Privacy Policy
Effective August 17, 2026
The short version: your ledger stays on your iPhone. Your day
records, receipt photos, dollar amounts, tax-home address and location history are
never sent to us and we have no way to read them. We do run a server, and this page
says exactly what reaches it.
Stays on your iPhone, always
- Day records, receipts, dollar amounts, tax home and settings are
stored locally. If you enable iCloud sync (when available) they are also stored in
your own private iCloud database, which is controlled by your Apple ID and
is not readable by us.
- Location. The app uses low-power location events (significant
location changes, visit detection, and a single geofence around your tax home) to
notice overnight stays away from home. All of it is processed and stored on your
device, coordinates on day records are rounded to roughly city-level precision, and
raw location events are deleted after 90 days. Location data is never transmitted to
us or to anyone else.
- Receipt photos. Stored on your device (and your private iCloud
if sync is on). Text recognition runs on-device with Apple's Vision framework — the
image is never uploaded for processing.
What reaches our server
When you first open the app it creates a random identifier for that installation.
It is not your device ID, not your advertising ID, and not linked to you unless you
choose to sign in. Against that identifier we store:
- Your setup answers — how you run, how many nights you're away,
how you keep records today, and the rest of the questions in the two-minute setup.
We use these to understand who the app is working for.
- Usage counts — how many day records and receipts exist, how many
times you've opened the app, when you last opened it, and your app version. Counts
only: never the contents, never the amounts.
- Your Apple sign-in, if you use it — the user identifier Apple
gives us for this app, and your email address only if you chose to share it rather
than hide it behind Apple's private relay. There is no password; we never see one.
- Subscription status — whether a trial or subscription is active,
via Apple and RevenueCat. Never your name, card number or billing address.
Who else is involved
- Apple — the App Store handles all payments, and Sign in with
Apple handles sign-in. Apple's privacy policy governs both.
- RevenueCat — tells the app whether your subscription is active.
- TelemetryDeck — privacy-focused product analytics; receives the
same installation identifier and event names, no ledger contents.
- Railway — hosts this site and our server.
That is the complete list. No advertising SDKs, no data brokers, no third-party
trackers.
What we never do
- We never sell your data, to anyone, for any price.
- We never share it with advertisers or data brokers. The app contains zero ad SDKs.
- We never track you across other apps or websites — which is why the app never
shows you a tracking permission prompt.
- We cannot read your ledger, your receipts, your amounts or your location history.
They never reach us.
Deleting your data
- Settings → Data & Privacy → Delete all records erases every
record, receipt and setting on your iPhone (and your private iCloud copy, when sync
is available).
- Settings → Data & Privacy → Delete my account erases your
setup answers, usage counts and Apple sign-in from our server. It is immediate and
permanent; we keep no archive.
- Deleting the app removes its on-device data. To cancel a subscription, use the
App Store — Apple handles billing, so we cannot cancel it for you.
You can also email us and we'll do either one for you.
Children
IFTA Tracker is a work tool for commercial drivers and is not directed at children
under 13. We do not knowingly collect data from children.
Changes
If we change this policy, we'll update this page and the effective date. Material
changes will be called out in the app.
Contact
Questions, or a deletion request: abdul@masterinbox.com